Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3c57-hg33-rhrp

Опубликовано: 27 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5

Описание

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that under certain conditions could have allowed an authenticated attacker to distribute malicious code that appears harmless in the web interface by taking advantage of ambiguity between branches and tags during repository imports.

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that under certain conditions could have allowed an authenticated attacker to distribute malicious code that appears harmless in the web interface by taking advantage of ambiguity between branches and tags during repository imports.

EPSS

Процентиль: 3%
0.00019
Низкий

5 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 5
nvd
21 день назад

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that under certain conditions could have allowed an authenticated attacker to distribute malicious code that appears harmless in the web interface by taking advantage of ambiguity between branches and tags during repository imports.

CVSS3: 5
debian
21 день назад

An issue has been discovered in GitLab CE/EE affecting all versions be ...

EPSS

Процентиль: 3%
0.00019
Низкий

5 Medium

CVSS3

Дефекты

CWE-94